1# watchdogd seclabel is specified in init.<board>.rc
2type watchdogd, domain;
3allow watchdogd self:capability mknod;
4allow watchdogd device:dir { add_name write remove_name };
5allow watchdogd watchdog_device:chr_file rw_file_perms;
6# because of /dev/__kmsg__ and /dev/__null__
7write_klog(watchdogd)
8type_transition watchdogd device:chr_file null_device "__null__";
9allow watchdogd null_device:chr_file { create unlink };
10